Can't start nxlog from the host that i'm monitoring.
Here's the error logs comming from nxlog log:
Code: Select all
2019-01-08 02:46:46 ERROR Module missing at C:\Program Files (x86)\nxlog\conf\nxlog.conf:52
2019-01-08 02:46:46 ERROR Module missing at C:\Program Files (x86)\nxlog\conf\nxlog.conf:79
2019-01-08 02:46:46 ERROR path missing from route '2' at C:\Program Files (x86)\nxlog\conf\nxlog.conf:74
2019-01-08 02:46:46 ERROR exiting...
*I want to use 2056/tcp port to send the logs to NLS
*I already stop the firewall on my NLS server (Centos7) & the Monitored Host (Windows Server 2016)
Here's my nxlog config:
Code: Select all
## See the nxlog reference manual at
## http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html
## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.
#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog
define CERT %ROOT%\cert
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log
# Include fileop while debugging, also enable in the output module below
#<Extension fileop>
# Module xm_fileop
#</Extension>
<Extension json>
Module xm_json
</Extension>
<Extension syslog>
Module xm_syslog
</Extension>
<Input internal>
Module im_internal
</Input>
# Watch your own files
<Input file1>
Module im_file
File '%ROOT%\data\nxlog.log'
SavePos TRUE
Exec $Message = $raw_event;
</Input>
# Windows Event Log
<Input eventlog>
# Uncomment im_msvistalog for Windows Vista/2008 and later
Module im_msvistalog
# Uncomment im_mseventlog for Windows XP/2000/2003
# Module im_mseventlog
</Input>
# Watch your own files
<Input HTTPlog>
Module im_file
File 'C:\Program Files (x86)\web_server_logs\access.log'
SavePos TRUE
Exec $Message = $raw_event;
</Input>
<Output out>
Module om_tcp
Host 172.16.16.29
Port 3515
Exec $tmpmessage = $Message; delete($Message); rename_field("tmpmessage","message");
Exec $raw_event = to_json();
# Uncomment for debug output
# Exec file_write('%ROOT%\data\nxlog_output.log', $raw_event + "\n");
</Output>
<Route 1>
Path internal, file1, eventlog => out
</Route>
<Route 2>
Path HTTPlog => out2
</Route>
<Output out2>
Module om_tcp
Host 172.16.16.29
Port 2056
</Output>
which I copied from this post:
https://support.nagios.com/forum/viewto ... og#p177905
Pleaaaase help thanks a lot!